How to remove pxplay.exe

pxplay.exe

The module pxplay.exe has been detected as Worm.Ramnit

pxplay.exe
Remove pxplay.exe

File Details

Product Name:

Photodex Presenter
Company Name:

Photodex Corporation
MD5: bafae45f8b6b1d5b62417904d1eb50fa
Size: 20 MB
First Published: 2018-04-15 08:11:37 (6 years ago)
Latest Published: 2018-04-15 08:11:37 (6 years ago)
Status: Worm.Ramnit (on last analysis)
Analysis Date: 2018-04-15 08:11:37 (6 years ago)

Common Places:

%sysdrive%\งานกู้ 240658\root\program files\photodex

Geography:

100.0%

OS Version:

Windows XP 100.0%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x01513000

PE Sections:

Name Size of data MD5
.text 6098944 4cfacbf06e1ed29204b77773e64fbdcb
.rdata 73728 8872a93dd7cce2e70601350e2eb61f40
.data 8146944 1c1b10c3c9262f9eea9bcee82556ef6e
._asav 4096 620f0b67a91f7f74151bc5be745b7110
_BSS 139264 df0227e58c463e92b9238c910babbdac
.rsrc 28672 2593d81df4983a22de4dd6ca08fdb5bf
.reloc 380928 81a71981c4bcca872357c669515ec443
.yrdata 20480 ef820e803157cd857e2bb54082963ded
.text 188416 0f2046bfc6b09525c9ba990ba6fcc1bc
.text 188416 812bb758585a68d37cbcaf5d881946fd
.text 188416 6d86c4e8ff0d97158fae2262b2a07f59
.text 188416 dc822c5b7ffdadfe901fc2fb2cad60c0
.text 188416 0300fa17102ca3dbe7d97aeb9f002d7f
.text 188416 76189b8f94fb6d5fe6f28d772681ccd1
.text 188416 53a745ed3a04f6b12a2cdfb81a4c9b08
.text 188416 390299226927ad1d2e2252eb65bca30c
.text 188416 23aaa7ae9f5304cb88b3246ceee47d52
.text 188416 c0feafda75a8f3a33dd9891168ebd843
.text 188416 488fd0c3a82722f471debad107071196
.text 188416 4168fa86448a4c1d1f7ac1d65f99143a
.text 188416 e1d6ba33304909f61ac9083cb978be48
.text 188416 c670676ffdd34b369a9f130afa6f6b29
.text 188416 8bc9306cd0faad641246f3c8460d8cd9
.text 188416 f4e3d99023ae4bc87edf9d648597c5ff
.text 188416 354c557e70b01fc37ba40ad92f0c7abc
.text 188416 49c4f0c2582036d1eca3f398a39d1501
.text 188416 d3b6aa25e8e72310f5b4235b07f8139b
.text 188416 7e4b0bd33d16c1c8267ba0c8b364dd60
.text 188416 69e059aae11d98a47bc9d3417ef2125f
.text 188416 9df7b8aae1aaa2eebb183b9affb73656
.text 188416 f4053d4fa31a9365597d0bab403fa214
.text 188416 ff91f426b7fd8994807ac53de6c56fd5
.text 188416 7a3cca11bfaf9a26caf8804163e71424
.text 188416 5de652d2a9d551ebcd760fbfab1c287c
.text 188416 28e2c457040d7af53efb8cf24175a575
.text 188416 84c84b936c3256a89caef1aa089b921c
.text 188416 943d0fbd5ad9c5c42c05036fa6e0df74
.text 188416 78ac0f20941b41543918617589c9cd38
.text 188416 b8e868ab89c66fcbad7090be3109143f
.text 188416 58cc0a87fa5eca295ad5b8ff72bbf1a9
.text 167936 2a938f1fc415caae7977279a179db548

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for pxplay.exe
copyright for information about pxplay.exe